Static task
static1
Behavioral task
behavioral1
Sample
6f8ec23dffd536a8cfa8ffbbe5bb3e25_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6f8ec23dffd536a8cfa8ffbbe5bb3e25_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6f8ec23dffd536a8cfa8ffbbe5bb3e25_JaffaCakes118
-
Size
76KB
-
MD5
6f8ec23dffd536a8cfa8ffbbe5bb3e25
-
SHA1
55df54a655210c9d4e47d692179f875c537402ca
-
SHA256
cebceeb1bfc53e1cf0ebd96b8c54316653a51fd15c3ac9f87e68c5bb6f87a1d8
-
SHA512
6fdb4266bc71d71a5d4b9bdaddf103b1c672e74a35a6f8cc09cc928a9c2e6b7c333c000104bf2d544557e80c023e21e5b78829b720574d1d0e2d6e58b8cb910a
-
SSDEEP
768:4o/C8HfVGOE3FNOxV1+VhLUlQe513uzh688kXd4ObQb8uo63HQeDRYYB:Bc1NO5lQmtEXdr8YW3QeDRYY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f8ec23dffd536a8cfa8ffbbe5bb3e25_JaffaCakes118
Files
-
6f8ec23dffd536a8cfa8ffbbe5bb3e25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 58KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE